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A system for identifying an individual in an electronic transaction 

BACKGROUND OF THE INVENTION 

» 
* 

Field of the invention 

5 The present invention generally relates to the identification of individuals 
in an electronic transaction. 

Background art 

10 There are a large number of applications requiring identification of an indi- 
vidual such as: access control to restricted areas, transportation and elec- 
tronic ticketing, authentication in commercial and financial transactions, 
access to computers and networks, road toll management, etc. 
Electronic identification typically requires on one side a terminal connected 

15 to the system to be controlled, and on the other side a portable device, 
usually in the form of a chip card or badge being possessed by the indi- 
vidual requiring identification. 

A coupling is performed between the terminal and the portable device, 
either through electric contacts or through wireless coupling, such as in- 
20 ductiye or radiofrequency (RF) coupling, which technologies are becoming 
more and more popular since they do not require insertion of the card in a 
slot of the terminal. 

Identification of the individual often requires the use of a password such 
as a PIN code and/or biometric data sensed from the individual. When- 
25 ever wireless coupling is used, further security features must be provided 
for, in order to avoid tampering by emulation of the exchange of signals 
required by the identification protocol between the terminal and the port- 
able device. 

The high level of security required in a number of applications has led to a 
30 multiplicity of specific solutions specially dedicated to the application con- 
cerned, leading to complex solutions with very poor flexibility, in addition to 
high cost for design and manufacture. 
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There is accordingly a need for a versatile, universal system, which might 
be manufactured at low cost in large quantities and easily adapted to a 
variety of different applications, yet being reliable and simple to use with a 
high level of security in the identification process. 

5 

SUMMARY OF THE INVENTION 

It is therefore an object of the invention to provide such a system. The 
system of the invention is of the type comprising a terminal, an independ- 
10 ent portable device including a data processing means, and a wireless 
coupling means for exchanging individual-identification data between said 
terminal and said portable device. 

According to the invention, this system is characterised by further compris- 
ing a body-medium communication means including a transmitter in the 

15 terminal and a receiver in the portable devide, said body-medium commu- 
nication means being adapted to transmit from the terminal to the portable 
device a connection code at the onset of a transaction upon physical con- 
tact established by the individual between the terminal and the portable 
device. A control means in the portable device is adapted to check said 

20 connection code received and conditionally issue to the terminal through 
said wireless coupling means a signal for enabling further execution of 
said transaction in response to said connection code complying with pre- 
determined criteria. 

According to specific, preferred embodiments of the invention : 
25 - said control means is further adapted to conditionally issue a signal for 
enabling the operation of said wireless coupling means before further 
execution of said transaction ; 

- said checking means in the portable device includes a biometric sen- 
sor for checking biometric data of the individual upon physical contact 

30 established by the individual, in particular one of a fingerprint sensor, a 
voiceprint sensor and a subcutaneous ultrasonic sensor ; 

- the system further includes a means for detecting an interruption of 
said physical contact established by the individual between the termi- 
nal and the portable device ; 
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- said body-medium communication means includes Direct Sequence 
Spread Spectrum means, is a one-way and non-secure communica- 
tion means, ah/or is a non-secure communication means ; 

- the connection code transmitted to the portable device includes termi- 
5 nal-type identification data, said control means being further adapted 

» 

to check said terminal-type identification data received by the portable 
device with respect to corresponding data stored in the portable de- 
vice, and to conditionally issue said signal for enabling further execu- 
tion of the transaction in response to said terminal-type identification 
TO data complying with corresponding date stored in the portable device ; 

« 

- the connection code transmitted to the portable device includes first 
random data, said control means being further adapted to re-transmit 
said first random data to the terminal through said wireless coupling 
means, and the terminal being adapted to chdck said re-transmitted 

15 first random data with respect to said first data transmitted in the con- 
nection code ; 

- the connection code transmitted to the portable device includes sec- 
ond random data, said control means being further adapted to store 
said second random data received, the terminal being further adapted 

20 to issue a re-transmission request to the portable device through said 
wifeless coupling means, said control means is further being adapted 
to re-trarismit to the terminal said stored second random data upon 
reception of said re-transmission request, and the terminal being 
further adapted to check said re-transmitted second random data with 

25 respect to the initially transmitted second random data. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing and other objects, aspects and advantages of the invention 
30 will be better understood from the following detailed description of a pre- 
ferred embodiment of the invention with reference to the appended draw- 
ings, in which the same numerals refer to identical or functionally similar 
features over the different figures. 

Figure 1 schematically illustrates the essential integers of the invention 
35 and the way they mutually interact. 
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Figure 2 is a diagram illustrating the various functional blocks making up 
the portable device of the. invention. 

Figure 3 is a schematic illustration explaining the body-medium type of 
communication used by the system of the invention. 
5 Figure 4 schematically illustrates the functional blocs of the body-medium 
communication transmitter included in the terminal used by the system of 
the invention. 

DETAILED DESCRIPTION OF 
10 A PREFERRED EMBODIMENT OF THE INVENTION 

Referring now to the drawings, Figure 1 shows the basic parts of the sys- 
tem of the invention, which essentially includes a terminal 10 connected to 
the main system to be controlled (mainframe computer, access control, 

1 5 etc.) and a portable device 20. 

Terminal 10 is provided with a transceiver (transmitter-receiver) 12 which 
is placed at the immediate vicinity of the individual requesting identifica- 
tion, specifically at a location where the individual may have physical con- 
tact with the transceiver 12, e.g. by touching a metallic part such as a con- 

20 tact pad,, handle, etc. of the same. Transceiver 1 2 is connected to the rest 
of the terminal 1 0 through bidirectional (wired or wireless) communication. 
The other essential part of the system is a portable device 20 which may 
be held by the individual requiring identification, specifically which may be 
physically contacted by this individual. This portable device is preferably 

25 embedded in an object such as a bracelet or wristwatch having a metallic 
back, enabling permanent electric contact with the body mass of the indi- 
vidual. 

Two different communication channels may be established between 
transceiver 12 and portable device 20. 

30 The first communication channel, which will be called "Over Skin Commu- 
nication- (OSC), is a one-way, low data rate communication channel, from 
the transceiver 12 (which only includes OSC transmitter means) to the 
portable device 20 (which only includes OSC receiver means). 
Essentially, OSC communication is a communication which makes use of 

35 the body mass of the individual as a communication medium (body- 
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medium communication). This requires that the user physically contacts a 
suitable part of transceiver 12, on the one side, and a suitable part of 

* 

portable device 20, on the other side, in order to enable OSC signals to be 
transmitted from the terminal to the portable device. 
5 Details of OSC communication will be given below, in particular in refer- 
ence to Figure 3. 

The second communication channel, which will be called "RF communica- 
tion" is a two-way, high data rate communication channel between the 
transceiver 12 and the portable device 20, both being provided with RF 

TO transmitter and receiver means. 

RF communication may be of any known wireless, short-range communi- 
cation technique such as Bluetooth (IEEE 802.15.1), WPAN (IEEE 
802.15.3), HiperLan 2, ETSI-BRAN, etc. All such communication stan- 
dards enable two-way exchange of data at high rate (typically between 2 

15 and 100 Mbit/s) at short range (typically several tens of centimetres to 
several metres) with low transmission power. 

The first step of the identification procedure is the transmission from the 
terminal to the portable device of a so-called "connection code" through 
the OSC communication channel. Such a transmission may be initiated 

20 once the individual is physically in contact with some part of the trans- 
ceiver 12 arid also with some other part of the portable device 20 in order 
to connect both parts through the individual's body. 
The connection code includes two random numbers A and B and a mes- 
sage C containing an identification of the class to which belongs the ter- 

25 minal. 

Once the OSC receiver of the portable device has received the connection 
code, number A is retained in a store of the device. Data processing 
means included in the device 20 checks that the specific portable device 
having received the code does belong to the class of the terminal to which 
30 identification is requested. This is done by comparing the class identifica- 
tion included in message C to corresponding data stored in a memory of 
portable device 20. 

Once it has been checked that the respective classes of the terminal and 
the portable device indeed match, the portable device initiates RF com- 
35 munication and publishes number S. 
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The RF signal including B is received by transceiver 12 of the terminal 
which checks that this number B is the same as the one that had initially 
been transmitted in the connection code. Such comparison is in particular 
intended to manage with the case where several portable devices would 
5 be simultaneously present in the environment of the transceiver 12, with 
the latter concurrently receiving several RF signals originating from differ- 
ent portable devices. 

In a further step, the terminal transmits to the portable device through the 
RF communication channel a Request To Send number A (RTSA). This 

10 request is received by the portable device, which transmits through the RF 
communication channel the value A which had been retained in the store 
after reception of the connection code by the OSC receiver. 
Once this check has been successfully performed, the transaction may 
further proceed between the terminal and the portable device, through the 

15 RF communication channel. The next time a connection will have to be 
initiated between the terminal and the portable device, new values of ran- 
dom numbers A and B will be chosen which are not determinable by any 
portable device. 

A first advantage of the system of the invention that has been described is 
20 that identification may be performed - hence the transaction may proceed 
- only after the individual has physically contacted an equipment of the 
terminal, e.g. by touching a contact part (metallic pad, metallic handle, 
etc.) of the same by his hand or by the tip of his finger. This prohibits any 
use of the portable device without a voluntary action of the (fully identified) 
25 individual. This security feature is particularly important in portable devices 
making use of wireless communication in order to avoid any accidental of 
fraudulent establishment of an RF communication without the knowing 
and consent of the individual owning the card. 

A second advantage of the invention is that it just requires a very short 
30 contact by the individual of the contact part of the terminal (e.g. just a 
touch) for OSC transmission of the connection code, nevertheless all fur- 
ther exchange of signals between terminal and portable device is per- 
formed through RF communication with high data rate and sophisticated 
techniques involving correction codes, ciphering, noise and interference 
35 rejection, etc. 
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The invention in particular permits to retain all advantages of an OSC 
communication (positive action of the individual required to initiate com- 
munication) without the drawbacks of the same (in particular the low data 
rate). 

5 Besides, despite the fact that OSC communication requires a relatively 
high transmission power, since the invention OSC communication is only 
one-way there is no need to have an OSC transmitter in the portable de- 
vice, which may be devised with low-consumption circuits and a small bat- 
tery. 

1 0 A further security level may be added by providing in the portable device a 
biometric identification device including a specific sensor such as a finger- 
print sensor (either capacitive, thermal or optical sensor), a voiceprint sen- 
sor, a subcutaneous ultrasonic sensor, etc. Biometric identification will 
ascertain that the individual who bears the portable device and attempts to 

1 5 initiate OSC communication by physical contact with the terminal is indeed 
the authorized user, not e.g. an individual who had stolen the portable de- 
vice of the authorized user. 

Figure 2 illustrates the main functional blocks of a preferred embodiment 

of the portable device 20. 

20 A data processing means 22 includes a microcontroller with a CPU, RAM, 
etc. and a series of buses and interfaces for communication with a num- 
ber of peripheral devices including a non-volatile memory 24, an OSC re- 
ceiver 26, a RF transmitter/receiver 28, an Optional biometric sensor 30, 
an optional light/sound indicator 36 and a time/date stamp circuit 38. The 

25 whole device is powered by a rechargeable battery 32 connected to a 
charger 34. 

As far as the OSC receiver 26 is concerned, this is a device of a known 
type for receiving signals transmitted through the body of an individual. 
OSC communication is a known technique, studied in particular in papers 
30 by T. Zimmermann, who had devised a "Personal Area Network" limited to 
the extent of the body of an individual by making use of the biologic mass 
as a transmission medium. 

Figure 3 illustrates the principle of such a transmission, which is based on 
the use of quasi-electrostatic fields. An OSC system 40 includes a trans- 
35 mitter 42 and a receiver 44 coupled by a biological conductor 46, the re- 
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turn loop being through ground 48. Since the attenuation of the signal is- 
sued by the transmitter 42 is very high (typically 60 dB) and mainly de- 
pends on the return through ground (10 fF), the transmission signal must 
be powerful enough to be correctly decoded by receiver 44. However, a 
5 lower amplitude may be chosen for the transmitted signal, by using a 
more sensitive receiver and interference-elimination techniques such as 
DSSS (Direct Sequence Spread Spectrum) techniques. 
However, in any case, the data rate remains low, typically less than 
10 kbit/s. Nevertheless, as explained above, the system of the invention 
10 just requires a very small data volume (a few hundreds of bits) to be re- 
ceived by the OSC receiver. 

Since OSC involves a communication medium which is a part of the body 
of the individual, the OSC receiver 26 includes a sensing element which is 
in contact with the body of the individual, preferably in permanent contact. 

15 The portable device may also include a (not shown) device for detecting 
that the sensing element is indeed in contact with the body of the individ- 
ual and has not been taken apart, and for inhibiting any operation of the 
device otherwise. Such a device may e.g. include an electric or thermal 
sensor for detecting heart beat; such sensors are well-known to the man 

20 skilled in the art and will not be further described. A preferential implemen- 
tation is a portable device in the form of a wristwatch: if the watch is taken 
off from the arm of the user, the embedded electronic circuit of the port- 
able device will be automatically deactivated. 

■ 

A typical arrangement of circuits for an OSC transmitter 50 (as the one 
£5 included in transceiver 12 of the terminal) is shown on Figure 4. It includes 
a code generator 52 receiving the connection code to be sent to the port- 
able device, and a spread spectrum generator 44. Both signals are com- 
bined in a multiplier 56, which controls a modulator 58 driving an HF gen- 
erator 60. The modulated HF signal is applied to a body coupler 62 for 
30 transmission to the portable device through the body mass of the individ- 
ual. 

Given the security features explained above, there is no need to cipher 
the information transmitted through OSC communication, which enables 
simple and robust signal transmission with low risk of signal loss or altera- 
35 tion. 
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Turning again to Figure 2, in addition to OSC receiver 26, the portable de- 
vice 20 includes also an RF transmitter/receiver 28 interfaced to process- 
ing means 22. 

As mentioned above RF communication may be through any known 
5 means such as Bluetooth, WPAN, HiperLah 2, ETSI-BRAN, etc. The tran- 
smitter in the portable device is devised so as to have low consumption 
(less than 20 mW), thanks to low RF transmission power (less than 1 mW) 
due to the short range between the portable device and the terminal. Fur- 
ther, by implementing interference-reduction techniques such as DSSS, it 
1 0 is possible to keep a small size for the transmitter in the portable device, 
yet enabling high data rate (typically between 2 Mbit/s and 1 00 Mbit/s, de- 
pending on the requirements of the application). Reduction of interference 
; may be obtained by techniques such as Direct Sequence Spread Spec- 
trum (DSSS) modulation or any other known technique well known from 
15 the man skilled in the art. RF communication may further implement an 
interoperability standard such as IETF-TLS and/or standard communica- 
tion protocols such as TCP/IP. 

The whole portable device 20 is powered by a rechargeable battery 32 
combined with a charger 34. Charger 34 is preferably a non-contact char- 
20 ger, e.g. using magnetic induction, light cells, or an EM field receiver an- 
tenna. 

It should be noted that in the standby state of the portable device only the 
OSC receiver 26 and the time/date stamp 38 are (partially) active. Once 
data signals are received by the OSC receiver 26, then all the main func- 

25 . tiohs of the device, especially the data processing means 22, will be 
waked up. Since on normal use, i.e. excluding identification, the individual 
may be in contact with a wide variety of equipments possibly compatible 
with the system of the invention, a preliminary check upon the terminal 
class indicator received by the OSC receiver is performed before any acti- 

30 vation of the biometric sensor 30 and of the RF transmitter/receiver 28. 
This avoids activating such modules - which require substantial power 
supply - only if the individual is in contact with a terminal actually corre- 
sponding to the class of equipment authorized (as stored in the memory of 
the portable device). 
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The time/date stamp circuit 38 is preferably adapted to be set through a 
communication network, e.g. by means of a network time protocol such as 
RFC 11 19 and RFC 1305. 

Indicator 36 may be a light indicator (LED or LCD display) and/or a buzzer, 
5 enabling a confirmation given to the individual of a positive (or negative) 
identification with respect to the system. 

The invention described above may be used in a number of different ap- 
plications. 

A first typical application is in the telephone field, wherein the terminal is a 
10 mobilephone or a telephone handset incorporating a contact pad such 
that, once the phone is handed by the user bearing the portable device 
(e.g. in the form of a Wristwatch in permanent contact with his body), the 
phone is automatically configured and adapted to receive phone calls. The 
phone may access a telephone directory stored in the portable device 
15 and/or automatically set preferential parameters of the user. Further, the 
call may be billed to a specific subscriber account, which details are stored 
in the portable ddvice. 

Another typical application is with vending machines, wherein the user has 
just to touch the drawer or door of the dispenser of the machine to enable 
20 the transaction, without any need to introduce money, credit card, etc. in 
the machine. 

Other typical applications are in the field of conditional access (either 
physical or logical). For instance, it may be enough for the user to touch a 
computer to initiate the check of his authorization to access the computer 
25 or network and load a user profile in the computer, with no need to ask for 
a password. Means may be provided to automatically lock the computer if 
the user moves away from the computer to a distance which is not enough 
to maintain RF communication. 

The portable device of the invention may also give access to a transporta- 
30 tion means. This may be a personal transport means, the portable device 
functionally corresponding to the contact key of a car and further storing 
information about driving license, insurance, rental details, etc. The device 
may also enable an individual user to access public transportation just by 
pushing an access door (the physical contact with a terminal resulting 
35 from this contact with the door); by checking entry and exit points, the sys- 
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tern may also bill the user automatically as a function of the distance trav- 
elled. 

Many other applications may as well take benefit of the advantages of the 
system of the invention, such as (the following list being of course not lim- 
5 ited): 

- storing of personal data with automatic conditional access; 

- on-the-fly ciphering/deciphering and storing of data; 

- access to restricted area: an electric lock or disablement of an alarm 
may be obtained just by contacting and turning the handle of a door; 

1 0 - protection against hazardous appliances such as a guns, the system 
of the invention being implemented such that the gun can be triggered 
only by an authorized individual, who is identified automatically at the 
moment he grasps the handle of the gun; 

- tracking of individuals in premises: every iime the individual touches 
15 and opens a door, his is automatically identified by the system and the 

corresponding time and location are logged in a central database of 
the system; 

- triggering an alarm when the individual moves away from the terminal 
at a distance which no longer enables safe RF communication; 

20 - localisation of a person, just by letting him touch a special post having 
a known position : the system then automatically sends to a central 
site a message indicating position and identity of the requesting per- 
son. 



25 



